POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

The IP attempted to use the FTP server to distribute keylogging software.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

This IP belongs to Telus Communications.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.

The IP address has been linked to the creation of artificial traffic to crash our website.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

This IP was implicated in attempts to inject ransomware into our systems.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

It made multiple requests with the same X-Att-Deviceid header.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

The malicious IP conducted HTTP verb tampering, exploiting varying responses to different HTTP methods.

This IP belongs to Home Depot.

The IP attempted to use the Mail server to relay spam to other servers.

Multiple requests with the same X-Forwarded-For header.

The IP attempted to register as a VOIP user with no password.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

This IP belongs to Target.

GET /.git/config: Trying to access source code or repository configuration information.

It attempted to make unauthorized calls using the VOIP server.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.